Skip navigation
Twitter   Follow us  •   Share   Share    Become a member
1 2 3 4 Previous Next

Smart Architect

48 Posts tagged with the smart_architect tag
0

We’ve pondered before on this site the situation in which enterprise architects find themselves — that is, that most people in the organization don’t quite understand their work or the impact it has on business success. If you want to help change that perception, maybe it’s time to start making some more noise about your own work on the world stage.

 

Outside the defense industry and the Defense Enterprise Architecture Awards, which are given jointly by The Association for Enterprise Information (AFEI) and the Office of the Department of Defense Chief Information Officer, Enterprise Architecture (EA) and Standards Directorate, there may not be a slew of opportunities to do this. But one of them is coming up this month: Enterprise and IT services firm iCMG for the last couple of years has had a global competition to recognize the work of enterprise architects in a wide range of areas, from enterprise transformation and planning to customer-oriented business models to technical expertise in IT service management. And this time around, it’s got some new categories that could throw an even brighter spotlight on just how crucial enterprise architects’ work is to the business.  

 

One of them is an award for Most Innovative Enterprise/Business/Technical architecture. How can you not love an award with the word “innovative” in the title, especially from the EA point-of-view? I’d bet there are bound to be lots of entries on the technical innovations, whether it’s improving service-oriented architecture performance through new architectural patterns or architecting mission-critical apps in Hadoop.

 

All good stuff, but I’m equally looking forward to what we may learn from contestants about their work exploiting EA as the foundation of all sustainable innovation in the enterprise. With an architecture setting forth standards, frameworks and maturity models to guide development, envelope-pushing innovations should be less likely to occur in isolation, or at higher costs because of potential duplication of existing efforts, or without regard for how they may be repurposed beyond one business unit to service the enterprise at large, and so without the peril of becoming just another legacy implementation that can’t seamlessly evolve with the business. (Check out Eric Bruno’s series of growing agility through federation here and here, as well as his piece on architects vs. enthusiasts here, for some insight into realizing this picture.) 

 

Perhaps we’ll even see some real-world evidence of what Forrester’s Brian Hopkins has blogged about in the provocatively titled, “Do Not Depend on EA to Innovate.” While the title doesn’t sound particularly positive, he actually posits a role for enterprise architects “at the center of an Innovation Network where they connect innovation suppliers (lead users who are dreaming up new ways to solve their problems) with innovation users (other folks who can benefit from a generalization of the solutions the suppliers come up with). In addition, [enterprise architects] can bring innovation implementers — the team members who know how to actually make innovations into solutions that work for more than just one individual or group — into the conversation.”

 

What also caught my eye about this year’s awards is the introduction of a business domains, or industry, focus. Telco and media/entertainment, manufacturing, government and public sector, health care, retail — they’re all here. I think this just validates a point we’ve made on the site previously: Some enterprise architects may debate the value of focusing too intently on vertical industry expertise, but we think specialization is going to be of increasing value. If the enterprise architect isn’t strongly aligned to the industry in which the entity operates, the challenge of focusing EA processes to deliver real business value — of being the link between IT and the business — becomes that much harder.

 

I think you’ll see evidence of that vertical expertise even among past entrants. For example, an in-house development architected at ICICI Bank Limited to leverage technology and analytics in debt management surely required the enterprise architects to incorporate a good understanding of real-world collection strategies. Or think of the multiparty process intersections that must have been considered by the enterprise architects at The Hartford who streamlined the independent agent and underwriter sales-and-distribution experience for small business owner insurance sales. 

 

I’d also like to hear other architects in our crowd crow about their success stories with the Zachman Framework. This isn’t a new award at iCMG, but rather an annual one that should garner added interest this year, given the revision to that framework, which we discussed with John Zachman here.

 

Will you take the opportunity to get the word out about why your enterprise architecture matters, through this contest or other means? If so, let us know  what tack you’re taking. And good luck!

0

Professional Development Series

 

A couple of weeks ago I wrote the first in our series of professional development blogs highlighting industry associations that enterprise architects should consider joining (see here) . Among them was IASA, the International Association of Software  Architects, which also offers a year-long mentoring program for professionals who want to grow their expertise in a particular capability such as enterprise, business, software or information architecture. Also on the menu are programs that are industry-specific, or related to a skill or next-generation technology such as security and service-oriented architecture (SOA).


The discovery of this list came shortly after I received an email from my high school: It’s starting an Alumnae Mentoring program to help students interested in similar careers work toward their goals all the way through their college years.

 

This got me thinking: Do most enterprise architecture practices offer mentoring to staffers? As I recently wrote here, I think it’s very important to encourage the participation of younger architects in projects in a more holistic fashion. But I focused on why that’s good for you and your efforts, not how it helps the company and the staff. As Jeanne Ross, Director and Principal Research Scientist at the Center for Information Systems Research at MIT, recently told us, it’s important even for those lower down in the architecture food chain to spend time with those whose processes they are trying to affect. “They will start to design simpler things if they can start to understand the essence of the issue,” she noted. (For our interview with her, see this blog.)


Giving Back and Paying Forward


Here, I’d like to focus on giving back, or paying it forward — whichever interpretation you prefer — and not just to individual staffers but to the company that (we hope) you’ve been proud to represent. Toward that end, I talked about the value of a mentoring program and how to develop one, with Badar Munir, Chief Architect at i3 Technologies Inc., which provides management consulting services in business architecture, enterprise architecture (EA), organizational change, business transformation and process improvement. In Badar’s architecture consulting engagements, he’s had experience mentoring personnel who would run the EA practice after he left.

 

One important result from creating some type of formalized mentorship effort is this, Badar says: that home-grown and nurtured talent will be ready to step into the shoes of departing senior EA professionals. He says, “In bigger companies — especially if they have more complex enterprise architectures — they keep looking for people from the outside.” But why?  Going outside means they haven’t built a base of solid strategic architects to promote from within even if they have technical talent.

 

The goal, of course, is to ensure that future enterprise architects are business leaders and strategic thinkers first, not primarily subject-matter experts in a narrow area of focus. Says Badar: “An organization should establish and [develop] an EA program to achieve strategic benefits. [These benefits] may include achieving higher levels of business agility, improving ROI on IT capital investments, developing better insight into IT and business strategies [and/or] improving IT/business alignment.”

 

Steps to a Mentorship Program


So how do you  establish a mentorship program at your company — one that will not only affect junior architect staffers but also those who’ve perhaps had longer careers in roles such as project and program management?

 

Here are some thoughts from Badar, who recognizes that there can be two levels of mentorship efforts;

  • The first level focuses on developing a core EA training and communication program. “Provide this training to all resources whose projects will be audited or monitored by the EA team,” so they are prepared for their roles and deliverables from EA perspectives for all incoming projects. That means selected individuals, from project managers to solution architects to senior business analysts, are provided training regarding the company’s EA framework, its standards, components and goals. They are also trained about the EA governance process. 

 

  • The second type of mentorship identifies individuals to become future senior enterprise architects. “For mature EA shops, I recommend that chief architects establish such a program within their practices. As a matter of fact, it should be part of their EA maturity model,” he says. In his experience, it’s wise to consider as mentoring candidates not just individuals with hard skills such as program and process management, and information and infrastructure architecture adeptness. Soft skills, he says, are important, too — which means considering as candidates those individuals who are people-savvy, who respect the company’s culture and values, who are both analytic around total cost of operation and return on investment issues, and who have shown an understanding of business strategy and business models, he says.

 

  • Promising candidates can be identified through project participation. “For those you think you want to move up in the future, look for one or two of the soft skills — when you talk to them about IT or business strategy, how do they react?” he says. “Do they ask more questions, or do they remain in their technical domain and keep talking about how cool the technology they support is?” Be prepared for those coming from technical architect roles to struggle in the soft -skill areas in different ways.

 

  • The career ladder for IT architects may include moving them from project architect to solution architect to enterprise architect, as they acquire soft skills and experience interacting with the EA group to develop an understanding of the organizational EA practice, he says.

 

  • Project and program managers, he suggests, can be selected for EA management roles based on their personality and expertise in areas such as process development and management, and strategy and governance skills. These, he says, “will be critical for them to succeed in the EA group.”

 

Has your company thought about developing an EA mentorship program? If so, let us know how it got its start and how it’s going today.

 

1

We all know we live in a world that caters to the millennials — their tastes in fashion, music, body art. Having narrowly escaped being part of that generation myself (and yes, I am using “narrowly escaped” in a fairly broad sense), I take some comfort in having had experiences they’ll never know: the revelation that was the video arcade game Pac-Man; the premiere of Michael Jackson’s Thriller on MTV (back in its music video days); the sense of triumph that comes from getting un-lost without the help of a GPS.


In addition to the clout Generation Y carries in the world at large, they’re likely a growing influence in your enterprise too, on trends such as bring your own device (BYOD) and the use of social media.  Nearly 60 percent of 18-to-34-year-olds are accessing social media on their smartphones, according to IDC’s Custom IT Consumer Survey, sponsored by CA Technologies, and 40 percent of them expect to use social media at work. Close to 70 percent say being able to use it there would make them more satisfied. Indeed, the 2011 Cisco Connected World Technology Report noted that more than half the college students surveyed would decline a job at a company that’s inflexible with social media access, or would accept the gig and find a way to circumvent the policy.


So their influence may be causing, or soon will cause, its fair share of disruption at your company and within your architecture. A recent CA poll found that 70 percent of millennials already are driving their IT strategy, and only about half of them are well or extremely well-prepared for it (see graphics below) . And, this post by Andi Mann, vice president of Strategic Solutions at CA, speaks to the  impact of the consumerization of IT on technology groups -- you know millennials are a big part of that! Architects better get ready: The first time a business process must absorb the capabilities that social media presents, you’ve got yourself an architectural issue.

 

Millennials_Drive_IT_Strategy.jpg

 

 

Millennials_How_Prepared_Are_You.jpg

 

 

But perhaps you can take some comfort from the fact that when it comes to leading the enterprise architecture (EA) vision, there’s no substitute for experience. While I know many millennials who are quite mature as individuals, most of them simply haven’t been around long enough to master the skills and knowledge that chief enterprise architect roles require.

 

As we’ve often pointed out in this blog (most recently in our interview with MIT’s Jeanne Ross here), taking the lead on EA efforts is as much as anything about showing political savvy, displaying holistic thinking, and having deep insight into the industry at large and individual lines of business — not to mention having the patience to keep working toward goals despite resistance. A young employee may have depth in a specific area, but that’s just a piece of the puzzle. Perhaps a 25-year-old on staff has the IT domain smarts to deliver a key capability for a specific project’s requirements, but does she or he have the ability to describe the business vision that calls for that expertise to begin with?


All right, enough about making the case for job security for those Gen X-ers and Baby Boomers in charge of EA efforts. Now let’s examine the case for making sure said same aren’t ignoring how the next generation can be an asset to EA success, and why it’s important to actively encourage junior staffers’ overall understanding and contributions, rather than just siloing them into isolated tasks. Here are some ideas to consider:


  • EA has been defined as the description of the current and/or future structure and behavior of an organization's processes, information systems, personnel and organizational subunits, aligned with the organization's core goals and strategic direction. To me, this means that your work should consider that the future will be peopled by a generation that will bring its own interpretation about how processes should work, and the technologies and standards that must lie behind them. Why not get ahead of the game by seeing what fresh perspective that generation can bring to your efforts now?
  • If you see the enterprise as an organic and dynamic entity, then you necessarily also see it as one that has to embrace change and flexibility. Alas, we old(er!)-timers sometimes prefer consistency and stability in our personal lives, which can’t help but influence our work lives too. Younger workers though, are elastic. They’re masters of adaptability, and they’re not shy about it, either — youth, after all, is more likely to rail loudly against strictures that are more about form than function. Perhaps the business would benefit if Gen Y can help the seniors in the organization see when the work might profit from imposing less rigidity on how we get to where we’re going. (Isn’t blind framework compliance responsible for more than one failure of an EA initiative?)
  • I’ve heard it expressed that enterprise architects are the glue for facilitating the collaboration that is so important to successfully crafting architectures. Well, I don’t think we’ve had the pleasure of knowing a generation more collaborative than millennials — especially those more recently out of school, given the emphasis the educational system increasingly has placed on teamwork in studies and projects. Point is, this age group has been driving collaboration with their peers for a good part of their young lives, and they may have some insight into how to make it work well in the business, too.

 

Smart Architect would like to know what you think about tapping into the young workforce’s talents. Let us know below.

0

Professional Development Series

 

Last fall the Association of Enterprise Architects (AEA) — originally founded by the Open Group back in 2007, but now a separate not-for-profit organization — announced that its membership exceeded 20,000. Enterprise architects from 72 countries count themselves among its members. Upon reaching this milestone, Association CEO Steve Nunn had this to say:


“Industry demand for developing Enterprise Architecture as a profession has been the impetus behind the surge in membership and displays the commitment that practitioners, as well as their employers, are making when building their Enterprise Architecture strategy.”

 

But just as membership in the AEA reflects the growing demand by enterprises to embrace the discipline of architecture and profit from the standardization and integration it brings to the business, it also reflects an understanding by architects that it’s to their own benefit to join. Professional associations and organizations provide a forum to engage in discussions (online or live) about critical issues with like-minded individuals and contribute to industry efforts. They can be a pathway to educational and career opportunities; members may hear about possible jobs through their association networks long before they’re posted on Monster.com. And these associations promote and advocate for the profession in which you are invested. 


 

With all of this in mind, Smart Architect is kicking off what will be a regular series of blogs on professional development with a look at some of the associations you may want to investigate to further your profession’s interests as well as your own. Here are few to get you started:


Name: Association of Enterprise Architects

Membership: The primary professional membership level is its Member grade, which is open to a TOGAF® or Open CA certified Enterprise Architect. Fellow-grade membership is open to applicants who have five years’ AEA membership under their belts, and who hold a senior enterprise architect position. Other membership options also are available for those working toward TOGAF or Open CA certification and students.

Mission: AEA’s goals are to increase job opportunities for members and increase their market value by advancing professional excellence, and to raise the status of the profession as a whole. Only Member- and Fellow-grade members may join task- or issue-oriented work groups aimed at helping to advance the profession.

 

Name: Center for the Advancement of the Enterprise Architecture Profession (CAEAP)

Membership: Interested individuals must read and sign the Enterprise Architect's Professional Oath, which CAEAP describes as a social contract for moral behavior, commitment toward the community, and mutual obligation among members and the enterprise architecture profession itself. The oath is a guideline for shaping the behavior of EA professionals and for stating the consequences of misbehavior.

Mission: CAEAP says it promotes the professional status of enterprise architects, including clarifying the contributions of professional enterprise architects and creating brand recognition for the profession. It is also interested in advocacy about determining ethical behaviors and levels of regulatory self-governance, and educational and experiential standards for professional competency.    

 

Name: The International Association of Software Architects http://www.iasaglobal.org/iasa/default.asp (IASA)

Membership: Individuals can enroll as full, student or contributing members, at varying fee levels.

Mission: The International Association of Software Architects (IASA) makes its match with architects committed to the advancement and sharing of issues related to software architecture in the enterprise, product, education and government sectors. It wants to advance best practices and education while delivering programs and services to IT architects of all levels.  

 

Name: ISACA

Membership: Membership levels include professional and student at varying fee levels, and complimentary membership for academics in certain functional disciplines.

Mission: While not exclusively directed to enterprise architects, the independent, nonprofit, global association has a focus on practical guidance, benchmarks and other tools for the IT-enabled enterprise in areas that intersect with EA interests, including governance and security. Some of its brands include the Risk IT governance framework and the Certified in Risk and Information Systems Control (CRISC) certification for helping the enterprise understand business risk.

 

Name: Association of Business Process Management Professionals International (ABPMP)

Membership: Professional, academic and student memberships are available at different fee levels. Corporations also may join. Only professional and corporate members have voting privileges.

Mission: A practitioner-oriented and practitioner-led nonprofit, ABPMP hopes to guide the development of business process management as a mainstream discipline and serve as the authority for certifying BPM practitioners. While it, like ISACA, is not specifically geared to enterprise architects, it does count them among its members, including its Metro New York Chapter president. It makes sense, given the value that can come from combining EA and BPM in the service of architecturally enabled enterprise change that draws on improved, aligned and even automated processes.


This is just a starter list, and one focused on memberships that individuals themselves can join. If your organization wants to be part of an association whose interests align with enterprise architecture, corporate membership is available to organizations such as The Open Group, whose standards and certification programs for enterprise architects have been adopted worldwide, and Penn State’s Center for Enterprise Architecture, where partnering organizations can have early access to research and reports, exposure to undergraduate students interested in the discipline and the chance to sponsor their EA capstone projects, and the ability to influence the future of enterprise architecture education at multiple levels (undergraduate, graduate and professional education).


We’re sure there are many other professional groups that you’ve found invaluable in your own career, and we invite you to share your thoughts on what those are and how they’ve contributed to your own success. We also welcome your comments on any of the associations mentioned in this blog – what has been your experience as a member? Let us know below.


0

Have you been paying attention to how the mainframe’s role will evolve as your enterprise architecture strategy matures? You should be, considering that these systems continue to make up a significant part of business infrastructure. In several recent independent studies on behalf of CA Technologies, a significant majority of senior-level mainframe decision-makers (between 80 and 88 percent) responded that they believe mainframe applications remain a key business asset. 

 

My advice is that enterprise architects should be thinking of how to help their companies leverage these data center assets as viable candidates for private cloud-based transaction processing. Modern mainframes fit the bill because they are all about redundant internal components, high-speed and high-bandwidth I/O, flexibility to run both modern and legacy software, high security and extreme reliability. And, as Guillermo Merino notes in Saluting the Mainframe, only Google’s massive server farm comes close to rivaling the mainframe’s transaction-processing scale. 

 

How to allow mainframe workload processing to continue into the 21st century world of private clouds while reducing cost and complexity? The workflow-centric approach integrates well into modern SOA (service-oriented architecture)-based solutions.

 

The “Big” Event

 

An efficient way to integrate classic mainframe processing into a modern private cloud-based SOA is through event processing, where events can be used as inputs and outputs to workloads executed on the mainframe. For example, your Java EE software can trigger the batch processing of perhaps hundreds of thousands of transactions on the mainframe, where the results are delivered in real time, and perhaps stored in a database management system (DBMS) or NoSQL database. Thanks to these triggers, the entire system can remain technology agnostic, with no need to be concerned that it’s a mainframe providing the high transaction-per-second (TPS) processing rate behind the scenes. This is particularly important because it allows enterprise architects to strategize around the mainframe even as COBOL and JCL development skills are on the decline. Many CIOs are concerned about the looming mainframe skills shortage, as older workers with these talents retire and the younger generation isn’t equipping itself to replace them (see this article).

 

 

ericpixnew.jpg

 

 

In Figure 1, you can see how triggers throughout the system become events that can be processed anywhere in the data center, including on its resident mainframes. On the left are event sources, processed on the appropriate systems (a DBMS, Java EE servers, mobile devices and so on), with the mainframe on the right as a potential producer and consumer of these messages. As daunting as all this may seem, it’s made quite simple, thanks to the level of abstraction the events supply, combined with packages such as CA Workload Automation ESP software.  

 

Automating processing in this way makes it possible to plug the TPS power of a mainframe into existing systems without concern for the vast differences in technologies. Additionally, things can run in reverse – that is, SNMP or other events from the mainframe can be processed by other components of the architecture. This dynamic workload processing allows enterprise architects to craft their mainframe strategies to efficiently meet the high Service Level Agreement demands that only mainframes can provide, all from the modern platforms and languages that developers are comfortable with.

 

Integrating existing mainframe software and capabilities with modern software environments through the dynamic workload processing, software from CA Technologies allows enterprise architects to guide developers in finding the “sweet spot” between the processing options.

 

For more on how enterprise architects and CIOs are getting the message about how to get even greater value from their mainframe environments, read this piece by Tam Harbert and her update here.. And let us know how you envision the mainframe’s place in your own enterprise architecture strategy.

0

Storage is critical enterprise infrastructure, and how best to protect these environments to ensure the safety and recovery of the data that resides there is pretty darn important. But is this sometimes a bit overlooked by enterprise architects thinking more about big-picture strategies than nitty-gritty details?

 

Perhaps. Consider, for example, that physical to virtual infrastructure transitions present the best chance nearly any organization will have for some time to rearchitect its backup methodology, says Marco Coulter, Research Director for Storage Practice at TheInfoPro (a division of 451 Research). After all, a large-scale change like that doesn’t happen every day. You have to “exploit that opportunity, because you may not get it again for another 10 years,” he says.

 

Yet, when laying out the frameworks for physical to virtual infrastructure projects, most enterprise architects won’t have a ready answer about accomplishing backup redesign, he says. That has to change: Just as enterprise architects have a role in helping simplify server environments, so too should they play a part in reducing management overhead — i.e., the cost factor — for data protection. “This is a way of protecting the business; it’s not the business,” Coulter notes. “The time you spend doing this isn’t creating business value.” Yet, according to Storage Study Wave 15 done in 1H2011 by TheInfoPro, backup remains the largest storage time-sink (see chart below).

 

infochart.gif

 

Complexity has had a long reign when it comes to storing, managing and protecting data, going back to the days of purely physical environments. Without guidance from enterprise architects, the addition of virtualization, on- and off-premises clouds, and SaaS solutions, can further complicate data management and protection — certainly during the period of time when organizations are transitioning to these new technologies and environments.    

 

David Liff, VP, Global Marketing, at CA Technologies, sees the enterprise architect as bringing the risk assessor’s eye to the job, to apply recovery point objective (RPO) and recovery time objective (RTO) principles appropriate to each specific business process, across whatever swaths of technology are in place or moving into place, and ideally enabling all protections via a single ergonomic console. “Architecting storage used to be about making sure you had enough storage and that it was working. That’s now a given,” he says. “Now it’s about driving risk management around storage architectures, based on the business process defining RPO and RTO.”

 

The amount of data the enterprise is willing to lose and the amount of time it is willing to wait to recover information depends on the impact that each specific loss-and-recovery effort will have on the business. It may be okay to lose a day’s worth of human resource transactions and to wait two weeks to recover HR data, but clearly it’s a very different story for the transactions and data involved with online trading system processes, for example. There, the requirement may be to restore back to just one minute or one transaction ago, and to do it instantly. While storage architects are themselves being asked to think more about protection according to RPO and RTO objectives, they should be defining those SLA goals in consultation with enterprise architects, Liff says.

 

Indeed, the enterprise architect should make it a point to be involved now more than ever. After all, enterprise architects regularly deal with governance issues, and increased regulatory and legal requirements — such as producing digital records in a timely manner as part of electronic discovery of evidence during litigation — demand good storage architecting and data protection practices. 

 

The enterprise architect also is needed now, more than ever, to help guide backup and recovery strategies because the enterprise has to move away from using many technology solutions to manage and protect distinct environments — physical, virtual, cloud — to a solution that can range across these platforms and across their various vendors, while seamlessly accommodating different business process Service Level Agreements. “That’s a challenge that creates churn,” Liff says. “Storage is known for high levels of complexity, and in large organizations you have teams of experts running different solutions, but their expertise is not portable. These teams are passionate about what they do and emotionally attached to what they know, too. Once you get to the business-driven goals of RTO and RPO, you need someone who’s outside of just the storage world — the enterprise architect — to decide what is the way forward to a more comprehensive solution that gives you granular control at a very high level.” (Today there are just a very few solutions that fit the bill, including CA Technologies’ ARCserve, he says.)

 

However you’re contemplating addressing storage in the new year, Coulter makes an important comment about getting these architectures right, especially in light of all the work most enterprises have been doing around server virtualization and the growth in capacity that that’s been driving. “Get it wrong and you will spend more and more on storage, and that eats into the savings [virtualization can deliver] on the server side,” he says.

 

How are you planning to help your enterprise get storage right? 

 

 

0

What’s the future of enterprise architecture management? Detecon Consulting, an information and communications management consultancy headquartered in Bonn, Germany, expects to soon publish new research that explores this topic from the perspective both of businesses and the vendors that supply them with enterprise architecture (EA) tools. With some exceptions, both parties are predicting the same outcome: While EA is currently viewed in many organizations in terms of technology-operational or technology-strategic issues, that isn’t a sustainable model. Enterprise architecture’s future is to manage the whole enterprise, not just IT.

 

“What I have seen, not only in our study but in discussions with other customers and industry partners,” is the need for a “strategy to expand and extend their function into the business,” says Marcel Berneaud, Managing Consultant, Team Head EA Transformation, at Detecon. This expanded concept of EA is playing out in the implementation of roles such as demand manager or business architect, for example, to create better alignment between the business and IT. “The demand from the business side is that EA management should help them in a more business-strategic way, not just in a technical way.”

 

Phasing-in the Changes

But many wonder whether senior executives will embrace a broadened view of EA possibilities that will make it possible for architects to deliver strategic business management, and where might they draw some lines. For instance, many organizations need to encourage more skills development so the staff can apply EA frameworks to managing the extended enterprise rather than just the information systems. And perhaps there’s a need for bigger budgets to develop these skills, too, leading to some fears that a holistic approach of EA management might be too grand a scheme. The good news, says Berneaud, is that it is possible to take a phased and sequential approach to moving EA beyond its IT borders.

 

Starting sooner rather than later makes sense when you consider trends and challenges such as globalized businesses that require the enterprise to act in totally new environments. When you think about the international environment, “with many suppliers and customers, you need to see the big picture,” explains Detecon consultant Aneta Nowobilska. “You need new methods that let you handle your processes, enable the integration and exchange of data. Enterprise architecture can support these scenarios.” 

 

The Trends for Enterprise Architecture Management and Tools study explores many other scenarios, too, although the study also cautions that disparate viewpoints need to mesh a little better when it comes to whether or how EA tools can support the extended view of the function. The Detecon team points to some vendors having more of a technical history and maintaining their focus on the IT part of EA management, while others are trying to push the envelope even when architects themselves aren’t sure of how deep to go. For example, they’ve seen that EA tool vendors are finding it important to consider business continuity because it plays into the bigger picture of corporate risk management. But the research shows that some companies don’t see EA methods as having a role in supporting business continuity. Conversely, EA stakeholders are thinking more about their role in the mobile device/universally available information world, whereas some tools vendors haven’t seen mobile support as part of their job. 

 

New Vision of EA

Detecon is hopeful that its study will accomplish a couple of things: On the one hand, it can give enterprise architects more proof for persuading management to embrace EA for business requirements without fear. That can be found in advice on choosing pilot projects and applying EA management methods to show how well they can support business strategy and contribute to IT and business alignment. For their part, tool vendors will get some insight into what their customers are thinking that could play a role in how they evolve their tools. “It’s [about] what companies want to do in the future with EA management. And, if they want to stay competitive, they’ll have to comply with that vision,” says Nowobilska.

 

When it comes to EA's role in managing the enterprise, you can see that we at Smart Architect couldn't agree more -- just have a look here, or here, or here, for starters, Feel free to weigh in with your own thoughts on EA's impact on strategic business management. 

 

 

 

 

0

I’m sure you’ve heard comments like these before: “How do I prove my value to the organization’s leaders? Why don’t they understand what enterprise architecture really enables for the business?”  Well, opportunity’s knocking to change all that.

 

You will recognize it by the Big Data overcoat it’s wearing.


You know that oft-quoted statistic that humans use no more than 10 percent of their brain power? It turns out that the enterprise effectively uses less than 5 percent of its data power. That means there’s a whole lot of data there that’s not being maximized to drive business revenue or cost-savings. The enterprise architect who can help align the infrastructure and processes so that the organization can do more and get more out of its data — delivering real, tangible results that senior leaders can “touch and feel,” so to speak — is the enterprise architect who will get the recognition he or she so richly deserves.


Clearly, you and your colleagues, businesses, agencies and the IT industry at large are thinking about this (have a look at the article Big Data Proliferation Requires Big Solutions here). In my last blog, for example, I talked about some of the skills prospective employers expect enterprise architects to bring to the job-market table, and increasingly one of them is expertise in dealing with Big Data. Consider also the attention being paid to the relationship between Big Data and enterprise architecture at big industry conferences. The Gartner Symposium ITxpo 2011 touted sessions for enterprise architects such as Big Data for IT/OT: Integrating Real-Time Data Into Decisions, for instance. And the Hadoop World 2011 conference also featured its own enterprise architecture track, whose topics include how the open source Apache Hadoop project is being used to build real-time big-data services at Facebook, and how companies can bridge the gap between data warehouses and Hadoop to extract business intelligence from large, heterogeneous data sets. 


Research firm Forrester — the minds behind that 5 percent estimated data use figure — also has been all over the role enterprise architects can play in helping the organization boost its data returns, including taking thought leadership roles on the importance of a holistically approached information architecture and the need to assess applications’ integration of knowledge through service-oriented architecture (SOA), business intelligence (BI) and other mechanisms. But the usual approaches and implementations of these capabilities may well require revisiting. In his blog, Forrester Principal Analyst Brian Hopkins has noted that Big Data “will require new processes and may totally redefine your approach to data governance.”


The why for making changes such as those Hopkins describes is tied to the fact that now we’re not just talking about making sense of a lot of data. That’s been happening around historical data and predictive analytics for a long time. The why lies in the multiple aspects of Big Data that Forrester and other analyst firms are talking about. Call it the four V’s of volume, velocity, variability and variety, as Forrester has. Or, apply its attributes in any acronym you prefer, such as SVA-US (scale, volume and acceleration — structured and unstructured, including rich media and social media data), maybe, or VCS (volume, complexity of data types, and speed). The end result is the same. Traditional data warehouse and business intelligence systems can’t affordably keep up with making sense of the deluge, in real time, across diverse formats and in unpredictable ways. Nor do those tried-and-true approaches necessarily lend themselves to the increased interaction with data by more business users.

 

Here are just a few of the projects I’ve heard about that help illustrate both the complexity of getting value from so much data that so relentlessly enters the enterprise in so many forms, and the concrete value of moving in this direction:


  • A major bank has a project under way to use everything from transaction data to audio files from service calls with customers to improve its ability to get a true picture of what happens in fraudulent cases and to better detect fraudulent occurrences. 


  • One large health insurance firm has to deal with data from internal and external sources sprawling across in-patient, out-patient, pharmacy, finance and cost-management groups, for analysis of everything from treatments to demographics to lab tests, in order to provide decision support that lets doctors and nurses choose the best course of care. 


  • Tracking social media — talk about a wild, wooly and unstructured Big Data space! — made it possible for one firm to identify influencers in its area and then to send marketing messages outlining its solution’s benefits to those whose messages it deemed might have an impact on their followers.

 

What’s needed to conquer such oncoming challenges and realize emerging successes is someone to champion a new way forward, to architect a vision around Big Data. That vision, I’d think, needs to be an expansive one, inclusive of things like direct interaction with data assets by the business and dynamic information discovery. That champion should be YOU.


How’s Big Data knocking at your enterprise’s door, and what’s your strategy for answering the call? Share your stories with your peers here.

2

Once again, everything old is new again.  It's an exciting time to be part of the mainframe community. Various forces in the IT universe are impacting the delivery of compute services and driving the Renaissance of the mainframe. The rise of cloud computing has triggered the all too familiar distributed-versus-mainframe wars of 20 years ago.  Issues of cost and flexibility in IT delivery are again being raised, but now, rather than the departmental server provider calling on middle management, it's now the siren call of cheap computing by the cloud providers.

 

 

At CA, we see this convergence of forces as an opportunity for our customers to take a hard look at how they provide IT management in a cross-platform, cross-enterprise environment. With the rise of Linux on System z and IBM's next-generation hybrid mainframe, the zEnterprise, mainframe customers have the hardware capability to deliver cloud-based IT services within their own data center. We have always delivered world-class IT management solutions that enable our customers to deliver highly available services to their business.  In my session, I will outline CA’s strategy to exploit the mainframe's unique capabilities to deliver this value in the cloud-enabled enterprise and how we see IT staff converging into a new and more efficient “hybrid” workforce.

 

 

How are you planning to provide cloud based services in a cross-platform environment? 

 

 

http://twimgs.com/designcentral/caseewebsite/graphics/caworld.jpg

4

Imagine having to manage your personal computer the way you manage the distributed servers in your data center…

 

  • Instead of simply purchasing and installing apps that perform the useful functions you want, you have to laboriously piece each one together component by component and integrate and secure them yourself, or engage professional services consultants to do it for you over weeks (or more) while you struggle to still use your computer for other useful work.
  • Instead of just launching each app you want to use, you have to first specify how much CPU, memory, disk space, and network capacity you are going to allocate to it — and not just maximums, but how much will be consumed all the time (and if your demand spikes to more than those fixed amounts, all kinds of trouble from service degradation to crashes will ensue).
  • Instead of blithely launching additional apps as you need them, you have to manually rebalance the allocation of capacity to all your other apps to make room for each additional one.  After all, capacity can only sum up to 100%.
  • Instead of only running each app you want to use for the period of time you need to use it, it is so hard and takes so long to allocate and de-allocate resources and to start and stop apps that you have to keep them all on all the time.
  • Instead of your operating system dynamically tracking your attention and use of the multiple apps you have running at any one time, bestowing the most capacity upon the one you care about most or that is working hardest to provide its services, all your apps are always consuming whatever invariant portion of the resources you gave them when you launched them, needed or not, and even though you have only one "in front" on your desktop and are working intensely with it, it can only limp along using the fraction you gave it when you launched it.

 

 

These are just a few of the ugly and awkward differences between the experience we enjoy on our personal computers (and, yes, our individual servers and mainframes), where the operating system and user interface dynamically manage the prioritization and allocation of infrastructure resources to what we care about most — our applications — almost completely without requiring us to think about capacity or demand, and the harsh typical enterprise IT management reality.  When I think about how I use my computer, I am sure that my IT-enabled productive use of it would be severely hobbled -- at least a 10x hit -- if I had to be as aware and engaged in the constant minutia of managing and allocating every type and level of my computing infrastructure and the assembly and deployment of every application.  We're probably talking about at least 10x more cost for 1/10th the utility, and let's not even try to estimate the difference in agility. 

 

 

In my personal IT world, all I really care about are my applications and the services they provide.  The software that manages the starting and the stopping of those apps, the dialing up and down of resource allocation, and the sharing, separation, and prioritization of access to fixed real hardware capacity does so seamlessly, invisibly, and in a manner so responsive to my shifts in attention and demand that most of the time I am not even aware of its operation.

 

 

Imagine what it would take to approach that level of intelligent and dynamic automation of our distributed enterprise infrastructure management, of having the luxury of application-oriented management that responded to and optimized for business service needs instead of requiring the hammering of applications to fit the static and manually-administered infrastructure mold.  That's what we've been thinking about at CA Technologies, and we're planning to share some of that thinking with you during the "Cloud Agility Architecture" segment of the Smart Architect session at CA World.  Hint:  It's more than virtualization, more than what we think of as automation today, more even than "cloud", though all three of these are important prior art. 

 

 

Bring your use cases and be ready to contribute your feedback.  This is our imagination at work, but we're serious about making it a reality.

 

http://twimgs.com/designcentral/caseewebsite/graphics/caworld.jpg

0

As an enterprise architect, I sometimes say things like, "my gut says," or, "I feel this is right." It's precisely this touchy-feely approach to architecture that can get even the best in this business into trouble. So, when my stomach says to go right ahead with something, I force myself to pause and look for real data to back up the idea.


 

In the end, after all, it's better to say of an architecture effort that, "We made an informed decision."


 

Getting to that point often requires using business intelligence (BI) tools and other investigative approaches to suss out support for your ideas, innovations and key decisions. You might think OLAP (Online Analytical Processing), data mining and other reporting is out of scope for the architect (You have, of course, seen it applied successfully by IT for business requirements, in cases such as CVS Caremark Corp.'s culling of predictive customer loyalty data to recommend products to customers, or Hallmark Cards’ use of BI systems to identify which customer groups are best approached via direct mail and which are more effectively contacted via e-mail.) But let's review the definition of BI. Forrester Research defines it as "a set of methodologies, processes, architectures and technologies that transform raw data into meaningful and useful information used to enable more effective strategic, tactical and operational insights and decision making."


 

Good BI tools, when combined with your corporation’s enterprise metrics and your own measurements, can help serve as your decision-support system. Utilizing all these elements directly affects your requirements-gathering operation for new applications and your plans for enhancements to existing applications; decisions about infrastructure upgrades for performance and efficiency; and conclusions about driving cost-savings across your organizations’ IT systems. And more.


 

 

BI Methodology for Enterprise Architecture

Keep in mind that, as with architecture itself, there are two levels of BI: micro and macro. At the micro level, we mine data and apply it to individual applications and user needs. At the macro level, we apply the data to the entire organization’s business strategy and overall IT architecture.

 

Both levels are explored in the following proposed methods for applying BI:

 

  • Knowledge gathering: Mine your application and user data for usage patterns, security issues, deployment issues, defects, administrative statistics, data usage and feature usage.
  • General analysis: Apply formal math for statistical analysis and modeling, in order to uncover hidden relationships that can improve applications.
  • Measurement: State key areas, unique to your organization, that need to be consistently measured to gauge architecture success, such as raw performance numbers, user sessions, downloads and so on. Using this data at both micro and macro levels will help uncover architecture issues, and lead to better decisions going forward.
  • Collaboration: Build a platform for collaboration that uses the data and measurements you derive from your BI efforts, and share it across the organization and with other organizations. This may require the use of XML, EDI or other standard protocols.
  • Reporting: Just as the enterprise is required to produce annual reports and other financial reports, so should the EA produce statistical application reports related to architecture. The output should serve to feed the business strategy of your enterprise as a whole, along with its entire IT strategy, and the design and architecture of individual enterprise applications.


 

Many of the steps in this methodology involve data and interfaces with the applications themselves. But there’s more to it than that. For instance, the EA needs to be involved with user information-gathering through questionnaires and interviews, as well as in engaging with administrative staff for direct feedback. Time-reporting tools enter the picture so you can see which areas of software development have required the greatest investment.

 

Remember, as an enterprise architect, you can leverage off-the-shelf BI packages to help the entire process instead of building it all yourself. Tools are available to help with all areas of business reporting and application monitoring. CA Clarity PPM, for example, provides a suite of tools that promise to improve your project success rate, and help you more quickly solve business problems.


 

Look for the following key capabilities in any solutions you choose:

 

  • Financial management: The ability to gather and measure transaction data and project revenue, project costs and growth analysis;
  • Project management: The ability to track actual resource usage and hours against projections, which help you to be more accurate in future development;
  • Reporting and documentation: The ability to get results tailored to fit all stakeholders: C-level executive decision makers; enterprise architects and other architects; project leaders; and the developers themselves.


 

Dive Deeper Into BI's Value

BI is about formal measurement and analytics, which lead to informed decision-making in terms of business problems and the solutions to them. If you need to be further convinced of the value of BI, look at how enterprises are using portlet-based architectures to quickly assemble composite applications; data visualization to uncover the hidden value in existing data; business process management for automation and cost savings; and new collaboration tools to increase efficiency.


 

As an example, let’s look at what experts are calling location intelligence: The ability to collect pertinent data based on a mobile sales force’s location can create a feedback loop of information that, once analyzed, can lead to decisions that make the team more efficient, and potentially give the business a competitive edge. 


 

For more examples on how BI is helping enterprises in new ways, check out the following:

 

Whether you're supporting the business in making a business decision that will drive your architecture, or you want to double-check your gut instincts for any architectural decision, look to employ BI tools and methods to meet your needs. We’d like to know how you see BI tools fitting into your role as enterprise architect, and we’re sure your peers would like to know, as well. Feel free to share your experiences below.

0

IT leaders should never underestimate the extent to which the poorly coordinated application of advanced technology can destroy civilization.


Harmony doesn’t come naturally to implementing complex concepts such as virtualization and the cloud. It must be orchestrated, and that calls for the CTO and senior enterprise architect roles to align and intersect. A harmonious arrangement is especially warranted for building and automating virtual environments. Applying new, advanced technology requires an agreed-upon technical strategy and reference architecture. The CTO and the chief architects are responsible for defining both. Implementing the strategy/reference architecture occurs through the governance and technical leadership – the mapping of the whole into its constituent parts – which the enterprise architect function delivers.

 

Think of it as the CTO and enterprise architecture (EA) team together composing the score so that everyone involved in winning the virtualization war knows how to perform his or her part.

 

Virtualization, after all, is not a narrow technology. Virtual machines running on a virtual OS are just the start of the equation. All systems are layered and interconnected. The broader infrastructure software — application servers, enterprise service buses, database systems, etc — enables composite applications. (Any non-trivial application is a composite application.) The virtualized hardware begins a continuum that stretches to composite applications. Virtualization, then, should be seen as a contract between an artifact — any artifact — and something that knows how to do something with it.

 

Some examples are:

  • Java runtimes virtualize Java applications.
  • J2EE application servers virtualize web applications.
  • Relational database servers virtualize data schema and operations on the data.

 

And increasingly, organizations want that something to happen in the cloud. The cloud virtualizes where the artifact interpretation occurs. An enterprise can map elements of the composite application and software infrastructure to infrastructure-as-a-service (IaaS), platform-as-a-service (PaaS), programmable web APIs and software-as-a-service (SaaS). The result is a cloud-spanning, virtualized business services. (see Figure 1. A Cloud-Spanning, Virtual Application.)

 

cloudspanning.jpg

Figure 1.A Cloud-Spanning, Virtual Application

 

So, the artifacts — and the composite apps to which they contribute — must map to the things that know how to run them across internal and external environments. That mapping is accomplished through automation, and the automation process should be designed with modeling tools. Modeling tools vastly simplify defining the cloud-spanning business service, and replace:


  • Endless meetings, whiteboard drawings and PowerPoint presentations.
  • Complex, tedious manual tasks to configure and deploy application artifacts.

 

Making Good Things Happen

When the CTO and senior enterprise architects have a strong and collaborative relationship, successful use of new technology is possible. As CTO — now at CA Technologies and previously at other organizations — there are dozens of details that I have entrusted to my senior enterprise architects. Other CTOs can apply the same approach to provide depth to virtualization reference architecture, making the high-level concepts they  consider real.


The architects make the concepts in the technical strategy and reference architecture concrete enough to implement. For example, cloud-enabling an application is not possible without security, which requires the deep domain expertise of security architects. Security must occur consistently through all aspects of the solution, which is the role of architecture governance. The enterprise architect is critical to determining how each domain fits into the whole virtualization reference architecture. The architects also coordinate themselves and the organization through concrete models, which are essential to coordination. For example, there may be requirements for enterprise architects with expertise in automation to be paired with an architect with expertise in security. 


Modeling and architecture can also form the foundation for collaboration between technologists and business stakeholders. A new role is emerging: the “bridge architect.” The bridge architect is an enterprise architect who speaks the languages of both business and technology, and who can use intuitive models to ensure precise, concrete realizations of the business goals via IT. Consider, for example, that every time the enterprise uses a cloud service, it needs to create a contract concerning fees, service delivery and quality of service. That will lead to an increased need for architects who understand and can design these services into billing systems, roll them into reports and help the enterprise truly exploit new levels of agility.


Assess the CTO-Enterprise Architect Relationship

Virtual stall is an increasing problem in enterprises. Applying virtualization yields positive initial results, but increased use of virtualization does not deliver additional improvements. Architecture-independent application of virtualization is the cause of stall. A more devastating, and likely, outcome is an environment that doesn’t work at all.


So, the challenge I have for CTOs and enterprise architects who want to avoid this is: How good is your relationship? From the CTO’s perspective, you can’t be afraid to surround yourself with smart people with strong opinions. Part of the job of the enterprise architect is to push back, and making a CTO think harder about his or her own approach usually winds up being better for the organization. Enterprise architects are bright people. If they have reservations about what you’ve explained or how you’ve explained it, you should revisit the discussion.


I also think CTOs should view themselves as being a true part of the architecture team. While you ultimately make the final decision, more important is to realize that you are first among equals.


Finally, here’s hoping that CTOs and enterprise architects everywhere enjoy what they do. The way I see it, you’re having fun only if you’re doing something hard and scary, such as building your virtual, automated IT environment.


Let me paraphrase President John F. Kennedy when he spoke of going to the moon. He said we choose to do such things not because they are easy, but because they are hard. We choose to do them because the goal serves to organize and measure the best of our energies and skills, and because that challenge is one that we are willing to accept, and to win.   

 

 

 


0

Just a few weeks ago you may have found yourself checking over the school supplies lists for the kids, making sure they were equipped for the next educationally enriching year (notebooks, pencil cases — and don’t forget the colored markers!). Or, if those days are past in your household, perhaps you indulged in some fond memories as you turned the calendar pages.


But have you taken the time to make sure you are prepared for what’s next in your future, too? Now’s a good time to think about the gaps you’d like to fill in your own continuing education so that you’re poised for ongoing success in your enterprise architecture (EA) career.


The list starts here:

 

  • Hone your vertical industry expertise.

This tends to be a subject of some debate among enterprise architects. Some believe that what should matter most is knowing and understanding EA’s foundational concepts and principles and applying them successfully by way of methodology. These generalists believe that this is something that can be accomplished across industry sector boundaries and that leaning too heavily on specific industry knowledge may make an architect less likely to ask the questions and do the analysis that matters — not just to the vertical but to the individual company.

 

While these points have merit, the fact is that EA must increase the business capabilities of an organization. And to be successful at that, you’ve got to be deeply familiar with your business and the industry in which it operates, so that  you can bring that knowledge — along with an open mind —  to making assessments and gathering requirements. And since industries and enterprises are changing so rapidly these days, developing that familiarity isn’t a once-and-done thing. It has to be accomplished through ongoing engagement with subject matter experts at your company, by staying current with vertical journals and thought leaders, by attending industry-oriented conferences and seminars, and so on.

 

  • Bulk up your soft skills.

At least half the job of being a successful enterprise architect is political. In addition to the harder skills regarding things like methodology, modeling and governance, you’ve got to be able to effectively communicate with key stakeholders. Can you sell your case to all enterprise actors — business as well as technical — so that it’s compelling and persuasive? Several consultants and coaches have offered this advice for CIOs, but it holds true for enterprise architects as well.

 

If you’ve spent any time at all rehearsing an oral book report with your young child, you’re probably pretty good at picking out the parts that cause listeners to tune out: the drone-on laundry lists (“This happened, then that, then that, and that and that and that …”); the lack of clarity on key points (“Oh, I forgot to say first that you need to know the secret message is under the dog’s water bowl if you’re going to understand everything I just said.”); the wandering off-topic (“The book’s about Halloween, but I wish it was about Christmas because I like that holiday better.”).

 

But are you as good at sharpening your own discussions and presentations to persuade others that they should buy into your vision for architecting a better business foundation? Perhaps it’s time to peruse the course offerings in this regard.

 

  • Build finesse in financial management.

You may not directly control the purse strings that govern how the EA group at your company is funded, but increasing your understanding of business/IT finance should still make the list. A good reason, as some experts have explained, is that it’s important to understand financial concepts, such as depreciation and its role in technology investment decision making, to successfully translate future-state descriptions of a desired architecture into a business case for moving toward that direction.

 

If you want to know more about the methods businesses employ for funding their enterprise architecture operations, and perhaps influence them, have a look at The Many Faces of EA Funding: Which Is Right for You?.

 

  • Tool around the job postings.

It doesn’t matter that you’re not in the market for a new job (yet). Taking some time every month or so to review these listings will help you stay in touch with marketable skills. Sure, this gives you a chance to check the usual stuff, such as how your own framework certifications may compare with what’s in demand. But even more valuable is getting a heads-up on less obvious requirements that companies may be starting to seek out. Such as marketing savvy. One posting I saw, for example, takes the communicator aspect of the job to the max, expecting applicants to develop and execute a formal communications plan to promote EA. The words “Big Data” also are starting to crop up in the required skills section, such as the one I saw requesting a hands-on engineering background and experience with Big Data engineering challenges.  (Visit here for insight into how big data proliferation requires big thinking.)

 

And to return to the first point about why you should hone your vertical expertise, don’t be surprised to see that some job requirements expect you to participate in industry workgroups.

 

This isn’t a list you can cover with a quick shopping trip to the local school-supply store, of course! Then again, once you’re out of grammar school, pretty much nothing’s simple anymore. Feel free to add your own items to the list — we look forward to your feedback about continuing ed strategies for the enterprise architect.

 

0

John Zachman has been saying the same thing for a few decades now: Enterprise architecture should not be about building and running systems, but about engineering and manufacturing enterprises. The founder of the Zachman Framework continues to say that today. And the recent revision to the Zachman Framework speaks even more truth to that power.

 

The latest evolution of the Zachman framework was released in late August, and it has in its sights more descriptive representations of enterprise assets, so that the business can better deal with complexity and extreme rates of change. To help set the stage, it’s useful to know that Zachman considers his to be an ontology framework, meaning that it provides the structure for organizing information. As explained on the Zachman International web site, an ontology framework prescribes “the existence of a structured set of essential components of an object for which explicit expressions is necessary and perhaps even mandatory for creating, operating, and changing the object (the object being an Enterprise, a department, a value chain, a “sliver,” a solution, a project…)” and so on. So, it is the foundation the enterprise architect requires to act upon any of the methodology frameworks, such as TOGAF.  Methodology without ontology, Zachman told Smart Architect, is alchemy, not science.

 

Fundamentally, the changes were designed to more precisely articulate what artifacts (any tangible asset, such as a document, that contributes to an architectural description) are required for describing a complex object. “So this version of the framework is just one more step — and probably a major improvement” to what has gone before, Zachman says. “This is a better articulation of classification concepts, of the schema,” he says.

zachimage.jpg

 

Also, the revision recognizes that the audience for the framework is changing. “The audience 30 years ago was mostly made up of technical people. The audience really for this, is the whole enterprise.”

 

The basics stay the same, in that the framework still is based on a classification of descriptive representations in two dimensions. The first dimension is centered on answering six questions to achieve a complete description of a complex entity – i.e., the enterprise (see graphic above):

 

  • What is it made of (the data, the business objects)?
  • Why does it exist, for example, in terms of goals or business plan?
  • How does it work regarding things such as business processes and application functions?
  • Who holds various responsibilities and what are their relationships to one another?
  • Where are the entity’s location sites and their interconnections?
  • When are events scheduled and accomplished?

 

The second dimension has to do with reification, which involves transforming the idea of an entity into a result through the contributions of those invested in the outcome.

 

The Zachman Framework continues to follow, the principles that any other architectural discipline follows to construct an entity, whether that entity is an airplane, a building or the enterprise.   

 

More Need than Ever for Enterprise Architecture

 

There is some urgency in the revised framework’s focus on choosing words to more accurately describe its classifications for a more general audience — without, of course, sacrificing technical precision. There’s little runway left to get a general management audience to begin to understand conceptually what is going on in the enterprise, so that they can make the decisions and trade-offs necessary for it to succeed, Zachman says. “The name of the game today is extreme complexity and extreme rates of change,” he says. “The complexity today vs. 20 years ago is out of sight, and it is just the beginning. The same [is true] for extreme rates of change. So [if an enterprise is] to survive in the long term, you had better do architecture, whether you like it or not.” 

 

As Zachman notes, enterprise architects must create engineering design artifacts to instantiate whatever demand the business is trying to accommodate. Not only that, but if you want to change something after it’s built — and with the extreme rates of change characteristic of business today, chances are that you will —those engineering design artifacts are required as the basis for those changes. Otherwise, the business will spend time and money recreating what it’s already got or tearing it down to build it all anew. 

 

As an example of what the revision holds, Zachman explains that the framework’s data column, with its system-level view of what entities comprise an enterprise, isn’t necessarily clear to general management. “Enterprises couldn’t care less about entities — what they do care about are inventories, which are what they must manage to keep assets from leaking,” he says. Call the information in the column of data models inventory sets instead, and you’ve given the business stakeholders the “ah-ha” moment they need. Or consider the network column and its focus on enterprise geography and interactions among locations. To the generalist, the location model indicates building address, but what it should indicate, and now does, is the enterprise’s distribution networks (whether those networks are for raw materials, finished goods, or voice and data).

 

Zachman says that there’s opportunity to be harnessed, by architects with their heritage in IT, when it comes to embracing the paradigm of engineering the enterprise that is even better reflected in the framework’s revision. Though he’s been talking about architecting the enterprise and not just building isolated systems for a long time, it’s still a radical concept, he says, But perhaps it’s also one that will carry more weight in the profession with cloud computing’s rise and the prospects it offers the enterprise of outsourcing even more technology operations. “I submit that the reason the enterprise needs IT people is because what we bring to the table are the drafting skills, we know how to describe things and how to build models,” he says.

 

For years, the default has been “to write some code and get things implemented,” he says. The problem, however, is that “we’ve got legacy, all kinds of implementations and applications that are not integrated, flexible, interoperable and reusable. [We’ve got] applications that are not engineered but implemented.” He’s encouraged that this approach is changing, though, and that a growing body of thoughtful people in the IT community now really get the idea of the engineered enterprise.

 

The clock is ticking, and a lot faster than it used to be. Says Zachman: “The reason to do architecture for anything — and specifically for the enterprise — is because of complexity and because of change.”

 

 

0

Some big names in the IT industry – Microsoft’s CEO Steve Ballmer, for example, and Adobe’s CEO Shantanu Narayen – have publicly said they think that the growth of the cloud for hosting software will lead to a decrease in software piracy. Software piracy costs an estimated $51 billion globally every year, according to IDC in its 2010 report, The Economic Benefits of Reducing Software Piracy. While these executives may be right about a decline in the problem of rampant use of unlicensed software that has long troubled tech vendors, the cloud actually may create piracy problems of another sort: The theft of data and services that relate to applications running in the cloud.

 

Sure, data theft always has been an issue for companies. But with data increasingly found on the cloud’s “open seas” – make that “open skies” – it’s so much more easily boarded and taken for ransom by modern-day Blackbeards. When that data is intellectual property associated with your services, imagine the potential for revenue hijacks. As an example of an incident foreshadowing these concerns, look no further than the case where SAP’s TomorrowNow division illegally downloaded Oracle’s online support material to provide Oracle’s own customers with an alternate means of software services. The suit that began in 2007 finally ended late last year when SAP was ordered to pay Oracle $1.3 billion in damages.

 

It’s time to start architecting a global defense against such forms of piracy. Your work starts with thinking about what defenses need to be shored up – whether, for example, security holes exist that will allow your data in the cloud to be stolen. Pirates might want to realize many ends from looting IP data, including digital terrorism where such data is held for ransom, or even to manipulate the stock market by creating a negative perception of a company's reputation.

 

Enterprise Architecture to the Rescue

The enterprise architect has perhaps the most critical role to ensure the right technology is used to fight this battle against pirates in the sky. My strategy for success is comprised of a multi-pronged attack:

 

  • Network architecture: Diversity matters in your stock portfolio and it matters for architecting networks that extend into the cloud, too. The cloud, platform choices, global distribution of services, and layers of abstraction offer enough obfuscation to thwart intrusion. Oh, and it leads to a more scalable deployment as well; win-win!
  • Data architecture: Design for encryption, keep (where appropriate)data within your private cloud , and watch out for enterprise mash-ups. For one thing, control access to your critical data where it’s required (i.e. financial data that require audited, metered, access). Beyond protecting the obviously critical databases, don’t overlook apps’ administrative and support systems whose data lives in the cloud.
  • Directional Authentication: Have your users come from a single, known source of authentication or clearing house to reduce the chances of intrusion. Alternatively, you can use two-factor authentication, which requires two forms of proof that your users are who they say they are.
  • Intrusion and Theft Detection: In some ways, it’s a losing battle to fight the bad guys. Just make sure you know the instant they’re at your front door. That effort requires coordination with CSOs.

 

Let me expand on those thoughts a bit, starting with network architecture. With the cloud, network architecture goes beyond adding firewalls and routers in all the right places. It means choosing a cloud vendor with security guarantees; distributing your services beyond a single hosting provider; and building a private in-house cloud to house your most critical business components—that is, black box algorithms, customer data, and other valuable IP.

 

In terms of your data architecture, don’t assume all threats are external; often the biggest danger comes from within. Both accidental data exposure, and ill-intent can put you and your data at risk. Ensuring that your data is encrypted within the confines of your own firewalls, and not allowing applications to use internal data without going through proper gateways, will help thwart internal attacks and risks (accidental or not).

 

All that said, it’s my opinion that intrusion detection is where you should put most of your time, energy, and money. Many companies offer products and services to help protect your software assets, as well as your customer data, from theft and piracy. For starters, authentication, authorization and auditing software such as CA SiteMinder offers you peace of mind that access to your cloud or web-based services is secure, while providing your customers with the convenience of single sign-on across your products and services. Other products offer security at other stages of online software usage, such as when users initially sign up for access to your software, or make self-service support requests. These areas often are overlooked in terms of their security needs, and strong identity management software is a must here.

 

You should consider user activity reporting software, such as CA's User Activity Reporting Module, which securely tracks your users' activity across your online software and services to identify potential security breaches. This type of activity logging is sometimes mandated, such as with SOX compliance, and HIPAA privacy laws.

 

Of course, your company’s CSO is responsible for a corporate-wide vision of security in every facet of the business. This goes beyond architecting security into an application or suite. So, while it’s your job to ensure the systems your company deploys are secure, it’s the CSO’s job to align this across all software produced, bought, sold, and acquired, as well as respond to security incidents, and deal with the exposure and liabilities associated. Therefore, when architecting a software product’s security detection and response systems, be sure to align with your CSO and her company-wide strategy for dealing with risk in this area. (This slidecast provides a lot of advice about working with your IT security team to help ensure that application security is built in, not bolted on.)

 

I’ll reiterate: While it may be impossible to prevent data piracy, the best defense may be early detection when it does happen.

 

Breaking the Pirate Code

 

To summarize, your architecture to thwart modern software piracy should include a combination of the following:

  • Obfuscation through a scaled-out PaaS/Cloud strategy (no single source);
  • Private cloud, where appropriate, for critical IP, and customer data, too;
  • Data encryption at the source, inside an internal walled garden (trust no one);
  • Directional authentication: single sign-on from a known secure source (i.e. CA SiteMinder), and/or two-factor authentication (such as CA’s Arcot set of solutions);
  • Detection, detection, detection.

 

You also might find it helpful to review some other articles Smart Enterprise Exchange has authored on cloud security, including Security and the Cloud Must Co-exist; Unlocking Cloud Security; and Cloud Security: From Barrier to Enabler. Also check out videos like this one Cloud Computing: The Enterprise Advantage Video Series.

1 2 3 4 Previous Next

We encourage your feedback. Reach out via the "Contact the Editor" and "Contact the Concierge" services for any needs, questions or comments. We look forward to serving you!

Paula Klein, Smart Enterprise Exchange Editor
e-mail

Ellen Lalier, Smart Enterprise Exchange Concierge
e-mail
phone 516-562-5727; fax 516-562-5466